Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Indicate the possibility to terminate TLS in the TEE #222

Open
hannestschofenig opened this issue Mar 23, 2021 · 2 comments
Open

Indicate the possibility to terminate TLS in the TEE #222

hannestschofenig opened this issue Mar 23, 2021 · 2 comments
Assignees

Comments

@hannestschofenig
Copy link
Collaborator

@hannestschofenig hannestschofenig commented Mar 23, 2021

6.2. TEEP Broker Implementation Consideration

[...]

                       Model:    A      B      C     ...

                                TEE    TEE    TEE
    +----------------+           |      |      |
    |      TEEP      |     Agent |      |      | Agent
    | implementation |           |      |      |
    +----------------+           v      |      |
             |                          |      |
    +----------------+           ^      |      |
    |    TEEP/HTTP   |    Broker |      |      |
    | implementation |           |      |      |
    +----------------+           |      v      |
             |                   |             |
    +----------------+           |      ^      |
    |      HTTP      |           |      |      |
    | implementation |           |      |      |
    +----------------+           |      |      v
             |                   |      |
    +----------------+           |      |      ^
    |   TCP or QUIC  |           |      |      | Broker
    | implementation |           |      |      |
    +----------------+           |      |      |
                                REE    REE    REE

                   Figure 5: TEEP Broker Models

I am wondering if TLS could be included
into the TEE. It is correct that I do
not envision TCP being in the TEE.

[Hannes] This can be done and is done regularly. I think we should update the figure to include this option since it is very common.

@dthaler
Copy link
Collaborator

@dthaler dthaler commented Jul 10, 2021

It's model C. Simplest change would be to change "HTTP" to "HTTP(S)". Also keep in mind that these are just examples.

@dthaler
Copy link
Collaborator

@dthaler dthaler commented Jul 12, 2021

Fixed in draft -15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants